Configure the appropriate inside/outside interfaces Translate all traffic from 172.16.0.0/24 Create a pool of 100.0.0.1 to 100.0.0.2 from the 100.0.0.0/24 subnet
Ping google.com from PC1 and PC2. Then, ping it from PC3. What happens to PC3’s ping?
Clear the NAT translations and remove the current NAT configuration. Switch the configuration to PAT using R1’s public IP address.
Ping google.com from each PC. Do the pings work? Examine the NAT translations on R1.
1. Configure dynamic NAT on R1.
Configure the appropriate inside/outside interfaces
Create a pool of 100.0.0.1 to 100.0.0.2 from the 100.0.0.0/24 subnet
1
R1(config)#ip nat pool POOL1 100.0.0.1 100.0.0.2 netmask 255.255.255.0
Configure the dynamic NAT to apply to the ACL and the pool.
1
R1(config)#ip nat inside source list 1 pool POOL1
2. Ping google.com from PC1 and PC2. Then, ping it from PC3.
What happens to PC3's ping?
PC1 and PC2 can ping Google.com successfully. Subsequently, PC3 cannot ping Google.com.
This is because the dynamic NAT pool configures a 1 to 1 connection. Since only 2 public IP addresses are configured, the NAT is exhausted, and pings from PC3 are dropped.
3. Clear the NAT translations and remove the current NAT configuration.
Switch the configuration to PAT using R1's public IP address.
The NAT table is cleared. Dynamic routes will also be cleared.
1 2 3 4 5 6 7
R1#clear ip nat translation ? * Deletes all dynamic translations R1#clear ip nat translation * R1# R1#show ip nat trans R1#show ip nat translations R1#
Switch to PAT as follows
1 2 3 4 5 6 7 8 9 10 11 12
R1(config)#do sh run | include nat ip nat outside ip nat inside ip nat pool POOL1 100.0.0.1 100.0.0.2 netmask 255.255.255.0 ip nat inside source list 1 pool POOL1 R1(config)#ip nat inside source list 1 int g0/0 overload R1(config)#do sh run | include nat ip nat outside ip nat inside ip nat pool POOL1 100.0.0.1 100.0.0.2 netmask 255.255.255.0 ip nat inside source list 1 interface GigabitEthernet0/0 overload R1(config)#
4. Ping google.com from each PC. Do the pings work?
Examine the NAT translations on R1.
Pings on all 3 PCs now work. The NAT table should have only 1 NAT address, and multiple ports.
